CVE-2026-116505 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 device-information udhcpd.leases getDeviceInfo MAC address command injection

October 26, 2026 Yanac

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104 and classified as very critical. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection.

This vulnerability is reported as CVE-2026-116505. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More